Remediation
From Azure Portal
- Go to
Storage accounts. - Click the name of a storage account.
- Under
Settings, clickConfiguration. - Under
Allow storage account key access, click the radio button next toDisabled. - Click
Save. - Repeat steps 1-5 for each storage account requiring remediation.
From Azure CLI
For each storage account requiring remediation, run the following command to disallow shared key authorization:
az storage account update --resource-group <resource-group> --name <storage-account> --allow-shared-key-access false
From PowerShell
For each storage account requiring remediation, run the following command to disallow shared key authorization:
Set-AzStorageAccount -ResourceGroupName <resource-group> -Name <storage-account> -AllowSharedKeyAccess $false